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Senior Leadership Team — minutes 
28 May 2019 


Details of attendees are provided at the end of the minutes. 


1. Introductions and apologies 


Apologies for absence were received from Elizabeth Denham, James 
Dipple-Johnstone, Mike Fitzgerald, Robert Parker and Andy White. 


2. Matters arising from the previous meeting 


Minutes 


The minutes of the previous meeting were approved as an accurate record 
subject. 


Matters arising 


SLT discussed the real-time bidding (RTB) report which had been 
circulated following the previous meeting, with particular regard to the 
resources required for the actions from the report. 


Action: Simon McDougall to work with Ian Hulme, James Moss and 
Jonathan Bamford to confirm the resourcing requirements to 
undertake the actions set out in the RTB report. Due date: 11/6/19 


Actions and decisions 


Chris Braithwaite provided updates on the outstanding actions since 
circulate of the agenda. 


SLT discussed the children’s privacy regulatory priority, in light of the 
strategic threat assessment identifying children and vulnerable adults as a 
single issue. SLT agreed that it would be useful to map the work being 
done in relation to vulnerable adults to assess whether the existing 
regulatory priority should be amended. 


Action: Jonathan Bamford to lead on mapping current ICO 
activities to protect vulnerable adults, to identify potential links to 
the children’s privacy regulatory priority. Due date: 8/7/19 


3. Directorate Business Plans — Technology Policy and 
Innovation Executive Directorate 


SLT considered the business plans for Technology Policy and Innovation. 
In considering the business plans, SLT particularly discussed working with 
other regulators and lessons learnt from the research grants programme. 


Issue 


SLT discussed the challenges which had been encountered in recruiting to 
specialist technology roles, both within Technology Policy and elsewhere 
in the ICO. SLT welcomed the plans from Technology Policy for more 
targeted recruitment activities, which could be beneficial in other 
specialist areas. SLT also discussed opportunities to create expertise with 
existing ICO staff, particularly through the Tech Hub. 


4. Directorate Business Plans — Strategic Policy Executive 
Directorate 


SLT considered the business plans for the Strategic Policy Executive 
Directorate. SLT particularly discussed the development of the 
parliamentary strategy and resourcing of the Strategic Policy 
(International) Directorate. 


Issue 


SLT discussed progress with the age appropriate design code and was 
informed that Executive Team had agreed to delay the laying of the code 
until autumn 2019 to ensure that all concerns raised during the 
consultation could be reviewed. The concerns raised so far had been in 
line with the concerns which had been anticipated before opening the 
consultation. 


5. Cookies update 


Issue 


SLT discussed the proposed updates to the ICO’s cookie policy. This would 
be in line with the ICO’s cookies guidance, which would be published in 
the coming weeks. 


Decision 


SLT approved the wording for the website, subject to minor amendments, 
and should be implemented at the same time as the launch of the cookies 
guidance. 


Actions 


Mike Fitzgerald to implement the new cookies tool on the ICO 
website at the same time as the launch of the cookies guidance. 
Due date: 24/6/19 


6. Management accounts 


Issue 


James Moss explained that external legal costs were currently expected to 
be above budget due to increased activity. Louise Byers highlighted the 
potential to expand the use of business cases to ensure that all potential 
resource implications were considered at the outset of a piece of work and 
would keep SLT informed of any progress in this area. SLT also discussed 
the benefits of making resourcing implications a part of the standard 
report template. 


Actions 


Chris Braithwaite to update report templates to include resource 
implications. Due date: 11/6/19 


7. Sandbox risk management and governance 


Issue 


SLT discussed the proposals for risk management and governance of 
sandbox issues. Ian Hulme explained that the risk management process 
had been developed in consultation with the Head of Risk and Governance 
to ensure that it was consistent with risk management policies. It would 
also be important to ensure consistent terminology throughout the 
organisation, as discussed at the previous meeting in relation to the 
strategic threat assessment. 


Decision 
SLT approved the recommendations set out in the report. 
8. Risk and opportunity register review 


Issue 


SLT considered a report setting out recent updates to the risk register. 
Decision 

SLT agreed the recommendations set out in the report. 

9. SLT work programme 

Issue 


SLT noted the work programme. 


10. Service alignment update 


Issue 


Paul Arnold reported that the Service alignment project board had met 
the previous week and developed some products to assist staff with the 
transition to the proposed new structure. 


11. Any other business 


Issue 


Chris Braithwaite reported that electronic copies of the updated business 
continuity plan had been circulated to SLT. SLT members should also 
ensure that they receive a paper copy from Corporate Governance. 


Issue 


Paul Arnold reported that a GDPR - One Year On report would be 
published on Thursday. 


Issue 


Jonathan Bamford would be responsible for recording the key messages 
video for staff. 


Attendance 

Members 

Paul Arnold (Chair) Deputy Chief Executive Officer (Executive 
Director - Corporate Strategy and Planning) 

Jonathan Bamford Director of Strategic Policy (Domestic) 

Emma Bate Director of Legal Services (Policy and 
Commercial) 

Gill Bull Director of FOI Complaints and Compliance 

Louise Byers Director of Corporate Affairs and Governance 

Steve Eckersley Director of Investigations and Intelligence 

Andrew Hubert Director of Resources 

Ian Hulme Director of Regulatory Assurance 

Simon McDougall Executive Director - Technology Policy and 
Innovation 

James Moss Director of Legal Services (Regulatory 
Enforcement) 

Amanda Williams Director of Strategic Policy (Parliament and 
Government Affairs) 

Steve Wood Deputy Commissioner (Executive Director - 
Policy) 


Attendees 


Su Bansal Group Manager (Internal Communications) 
Ali Shah Head of Technology Policy (for item 3) 
Secretariat 


Chris Braithwaite Senior Corporate Governance Manager 


